Skip to content
Open-Source Registry

cargo / depth2depth / 0.4.1

depth2depth 0.4.1

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
471
operations
67K
packages
193
compiler runs
136
connections
3
job time
5m 26s
capture
785 KB
records
116K
bytes / record
6.7

Build behaviourits build script reached huggingface.co, us.aws.cdn.hf.coits build script ran curlundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 0eb9d041-5217-42b9-9657-812cf316f8e3 · built 2026-10-13 · complete

Artifact

file · retained · product · graph v2
1

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build code opened a network connection
    depth2depth 0.4.1 › huggingface.co:443, us.aws.cdn.hf.co:443
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
depth2depth 0.4.1
Destination
huggingface.co:443, us.aws.cdn.hf.co:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to huggingface.co:443, opened by curl

    subject huggingface.co:443

    by curl --fail --location --silent --show-error --retry 3 --output /home/runner/work/depth2depth/depth2depth/target/release/build/depth2depth-a8c7647484f04712/out/…

  2. Connection outside the process’s allowed destinationscause

    connection to us.aws.cdn.hf.co:443, opened by curl

    subject us.aws.cdn.hf.co:443

    by curl --fail --location --silent --show-error --retry 3 --output /home/runner/work/depth2depth/depth2depth/target/release/build/depth2depth-a8c7647484f04712/out/…

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/depth2depth/depth2depth/target/release/build/depth2depth-198d52b751da2cb0/build_script_build-198d52b751da2cb0

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl --fail --location --silent --show-error --retry 3 --output /home/runner/work/depth2depth/depth2depth/target/release/build/depth2depth-a8c7647484f04712/out/…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2454
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2454
  3. build-script-build/home/runner/work/depth2depth/depth2depth/target/release/build/depth2depth-198d52b751da2cb0/build-script-build5092
  4. curlcurl --fail --location --silent --show-error --retry 3 --output /home/runner/work/depth2depth/depth2depth/target/release/build/depth2depth-a8c7647484f04712/out/…5095

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Network

3 peers
  • huggingface.co:443 depth2depth's own build code · curl · Amazon.com, Inc. · 1 file · went into an output undeclared
  • us.aws.cdn.hf.co:443 depth2depth's own build code · curl · Amazon.com, Inc. · 1 file · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (depth2depth) via crates.io · 14,993 files · went into an output ecosystem
Dependencies202Build behaviour
ahash0.8.12build script
aho-corasick1.1.5
aligned-vec0.6.4
allocator-api20.2.21
anyhow1.0.104build script
array-init2.1.0
autocfg1.5.1
az1.3.0
base640.13.1
bimap0.6.3
binrw0.15.2build script
binrw_derive0.15.2build scriptproc macro
bitflags2.13.1
block-buffer0.10.4
bytemuck1.25.2
bytemuck_derive1.12.0proc macro
byteorder1.5.0
byteorder-lite0.1.0
candle-core0.11.0
candle-nn0.11.0
castaway0.2.4
cc1.4.4
cfg-if1.0.4
cmov0.5.4
compact_str0.9.1
cpufeatures0.2.17
crc32fast1.5.0build script
crossbeam-deque0.8.7build script
crossbeam-epoch0.9.20build script
crossbeam-utils0.8.22build script
crunchy0.2.4build script, not run
crypto-common0.1.7
darling0.20.11
darling0.21.3
darling_core0.20.11
darling_core0.21.3
darling_macro0.20.11proc macro
darling_macro0.21.3proc macro
dary_heap0.3.9
derive_builder0.20.2
derive_builder_core0.20.2
derive_builder_macro0.20.2proc macro
digest0.10.7
divrem1.0.0
dyn-stack0.13.2
dyn-stack-macros0.1.3proc macro
either1.18.0
enum-as-inner0.6.1proc macro
enumset1.1.14
enumset_derive0.15.0proc macro
equator0.4.2
equator-macro0.4.2proc macro
equivalent1.0.2
errno0.3.14
esaxx-rs0.1.10build script
fastrand2.5.0
find-msvc-tools0.1.11
fixed1.29.0build script
float80.7.0
fnv1.0.7
foldhash0.2.0
gemm0.19.0
gemm-c320.19.0
gemm-c640.19.0
gemm-common0.19.0
gemm-f160.19.0
gemm-f320.19.0
gemm-f640.19.0
generator0.8.10build script
generic-array0.14.7build script
getrandom0.3.4build script
getrandom0.4.3build script
half2.7.1
hashbrown0.16.1
hashbrown0.17.1
heck0.5.0
hermit-abi0.5.2
ident_case1.0.1
image0.25.10
indexmap2.14.0
itertools0.14.0
itoa1.0.18
jobserver0.1.35
kiddo5.3.3
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
log0.4.33
lz41.28.1
lz4-sys1.11.1+lz4-1.10.0build script
macro_rules_attribute0.2.3
macro_rules_attribute-proc_macro0.2.3proc macro
mcap0.25.0
memchr2.8.3
memmap20.9.11
minimal-lexical0.2.1
monostate0.1.18
monostate-impl0.1.18proc macro
moxcms0.8.1
nom7.1.3
nu-ansi-term0.50.3
num-complex0.4.6
num-traits0.2.19build script
num_cpus1.17.0
once_cell1.21.4
onig6.5.3
onig_sys69.9.3build script
ordered-float5.5.0
owo-colors4.4.0
paste1.0.15build scriptproc macro
pastey0.2.3proc macro
pin-project-lite0.2.17
pkg-config0.3.34
ppv-lite860.2.21
proc-macro21.0.107build script
pulp0.22.3build script
pulp-wasm-simd-flag0.1.1
pxfm0.1.30
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand0.9.5
rand_chacha0.9.0
rand_core0.9.5
rand_distr0.5.1
raw-cpuid11.6.0
rayon1.12.0
rayon-cond0.4.0
rayon-core1.13.0build script
reborrow0.5.5
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rustix1.1.4build script
rustversion1.0.23build scriptproc macro
ryu1.0.23
safetensors0.8.0
same-file1.0.6
seq-macro0.3.6proc macro
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
sha20.10.9
sharded-slab0.1.7
shlex2.0.1
smallvec1.15.2
sorted-vec0.8.11
spm_precompiled0.1.4
stable_deref_trait1.2.1
static_assertions1.1.0
strsim0.11.1
syn2.0.119
syn3.0.3
synstructure0.13.2
sysctl0.6.0
tempfile3.27.0
thiserror1.0.69build script
thiserror2.0.20build script
thiserror-impl1.0.69proc macro
thiserror-impl2.0.20proc macro
thread_local1.1.10
tokenizers0.22.2
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
typed-path0.12.3
typenum1.20.1
unicode-ident1.0.24
unicode-normalization-alignments0.1.12
unicode-segmentation1.13.3
unicode_categories0.1.1
valuable0.1.1build script, not run
version_check0.9.5
walkdir2.5.0
wasip21.0.4+wasi-0.2.12
winapi-util0.1.11
windows-link0.2.1
windows-result0.4.1
windows-sys0.61.2
wit-bindgen0.57.1build script, not runprebuilt objects
yoke0.8.3
yoke-derive0.8.2proc macro
zerocopy0.8.56build script
zerocopy-derive0.8.56proc macro
zerofrom0.1.8
zerofrom-derive0.1.7proc macro
zip8.6.0
zmij1.0.23build script
zstd0.13.3
zstd-safe7.3.0build script
zstd-sys2.1.0+zstd.1.5.7build script
zune-core0.5.3
zune-jpeg0.5.15

Raw data

capture
785 KB
records
116,445
bytes per record
6.7

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-13 · run 0eb9d041-5217-42b9-9657-812cf316f8e3

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2